Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: Ec2CYD/hja0a8fo0beM+KG5CHsgzdJiWmcKQKwTxRV0=
Subject key identifier: 09:F4:70:89:34:16:AD:C9:09:01:4E:D9:BF:A7:61:2A:64:F1:A4:4F
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 019A4F990C75D7F733434C37E59FF2CC84F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 06CD
Signing time: Tue 04 Nov 2025 16:00:21 +0000
Manifest this update: Tue 04 Nov 2025 16:00:21 +0000
Manifest next update: Wed 05 Nov 2025 16:00:21 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: 2CIVltLFdEsLuC2YrcA5PXNPXKkkYlUafNEAKE5X3d8=)
2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0c:75:d7:f7:33:43:4c:37:e5:9f:f2:cc:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Nov 4 16:00:21 2025 GMT
Not After : Nov 5 16:00:21 2025 GMT
Subject: CN=09f470893416adc909014ed9bfa7612a64f1a44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:7b:bd:70:2a:f6:88:1e:8c:4b:8e:4a:c8:
cd:f2:05:c1:1b:fe:95:59:41:f9:57:b3:8f:0e:36:
df:2f:ce:57:c4:59:8a:72:2a:d7:e4:4b:df:93:87:
61:9d:2a:db:37:91:9e:b7:c4:94:46:ea:8e:ad:1e:
61:28:0d:80:f2:98:7f:f5:9d:21:fd:69:48:2a:5d:
91:8e:e8:88:80:5a:61:4a:29:55:f0:08:dd:f7:c9:
39:70:19:6b:75:4a:f5:24:56:22:9e:4e:e0:92:31:
e3:51:18:ed:86:d6:98:78:13:76:1e:3c:cc:8f:91:
3c:50:11:b5:71:22:cf:24:85:6b:da:ef:69:50:a6:
9e:c3:fd:b0:a7:22:46:4c:d9:28:81:bd:3b:df:f4:
5d:45:07:40:19:6f:0d:36:d3:fd:b9:a6:a3:ae:2f:
13:38:95:1c:d9:95:b3:5d:88:f6:52:47:c4:f9:d2:
6c:33:81:3c:6d:7b:a9:b3:1c:45:62:af:38:46:69:
d7:2a:42:a4:33:58:f6:a2:55:49:63:b8:5d:36:d1:
f8:74:24:c1:b1:05:38:e4:93:99:97:ed:8f:2e:cc:
61:7c:15:98:5b:a1:f4:6a:05:1e:45:3f:1f:00:7c:
41:f1:34:9c:88:88:d8:ca:6c:78:2e:e2:5e:ad:7c:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:70:89:34:16:AD:C9:09:01:4E:D9:BF:A7:61:2A:64:F1:A4:4F
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4d:75:e0:02:a3:8f:de:b7:7d:fb:9e:cf:f0:ee:11:f8:9b:
6b:d2:26:a8:f9:03:59:34:2f:14:64:6d:e6:af:6a:53:0e:8d:
d0:c3:94:bc:b2:14:f4:5c:47:0a:6e:99:a6:04:f5:a7:b9:94:
2f:1f:ff:6f:dd:69:49:97:34:33:2c:fd:83:95:dd:5e:4e:11:
eb:da:62:e3:0c:cd:9b:b9:ea:21:a2:4a:99:df:d3:b0:d0:04:
f5:33:f6:6d:ab:b7:b6:77:b4:81:9a:c4:42:39:eb:54:83:6e:
24:ec:58:ca:31:ec:4f:7e:e4:e4:d1:b7:2e:8a:b8:bb:5f:cb:
9c:42:24:c8:c0:60:35:05:ce:b7:e4:45:8c:c3:ba:2b:1c:c6:
b3:41:41:20:1b:1e:d2:3f:d0:ca:47:84:7e:1d:0b:8d:49:7c:
5e:03:ab:d4:04:35:c8:8a:51:f2:37:13:7d:75:34:66:3a:fe:
45:21:8f:07:16:d4:c1:3b:1e:0a:d6:06:4b:8f:32:83:42:3f:
58:da:c0:72:4e:c0:e8:5f:20:d5:97:c7:ad:23:44:8b:b2:96:
52:5b:5a:87:58:0d:3e:32:ad:4a:49:0e:85:36:9e:06:04:af:
9e:4d:bb:50:95:e8:18:b1:46:00:b6:74:26:ef:c7:b0:5b:c8:
38:84:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:15 2025 by rpki-client